Group Policy Changes

Se Lai
Se Lai used Ask the Experts™
on
Password policies was changed to zero age, length and history automatically. I am not sure what was happened on DC.
May I know what could be the reason(updates) or any other thing.?
Password.JPG
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Paul MacDonaldDirector, Information Systems
Commented:
Someone changed the policy explicitly, or maybe an authoritative restore was done to some point prior to the policy being put in place.
Se LaiSystem Administrator

Author

Commented:
I haven't seen anything... no there was no backup. Maybe someone did it.
Shaun VermaakSenior Consultant
Awarded 2017
Distinguished Expert 2018
Commented:
Do you have audit configured as per CIS standard? If you do/did, you would be able to see events for GPO edits
Did you check gpo and make sure no other GPO is overwriting, EX check domain policy.
Tech Lead
Commented:
If you have auditing enabled then you can track the Group Policy changes.

And, if you have a backup of then you can restore it - How to back up and restore Group Policy Objects using PowerShell cmdlet: https://www.lepide.com/how-to/backup-and-restore-group-policy-objects.html

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial